Using the approach from !258 (merged) I checked that all dependencies was pinned down.

Some eggs where not pinned, all git repositories seems to be pinned ( I found there was only [nginx-push-stream-module])